abb2831b94659972c46587ceab67eeca

Sharing

Copy URL Twitter E-mail

General

Target

abb2831b94659972c46587ceab67eeca
Size

100KB
MD5

abb2831b94659972c46587ceab67eeca
SHA1

202d6c990d75579e183d98fbe760af4bba346fab
SHA256

d488ea1228a573898ecc7e1afd44420ecb599723018a368722b85c107d48b093
SHA512

ebdf7392beea34c905a12472ee258195e393ccd036f9cf087ad1a2e2a323bb3b454d3667058abef1cbeb1ac0fce7fec7d2d9bb546f86c698a56f922c049fc8a0
SSDEEP

1536:1gP3uy0Dod7Luf80DZD1/n+xph8/AExWZJMiczJwON+LAj:1M3f06qU4n+Lh8BxWIiFC+LAj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abb2831b94659972c46587ceab67eeca

Files

abb2831b94659972c46587ceab67eeca
.exe windows:4 windows x86 arch:x86

edceedcc8d951c3a674c7494973159c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
FindNextFileA
FindClose
CreateFileW
ReadFile
WriteFile
CloseHandle
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileA
GetFileSize
GetTimeZoneInformation
GetFullPathNameA
HeapAlloc
HeapCreate
HeapDestroy
GetProcessHeap
HeapReAlloc
HeapSize
HeapFree
UnmapViewOfFile
MapViewOfFile
GetEnvironmentStrings
FindResourceA
FindResourceW
LoadResource
SizeofResource
LockResource
FreeResource
SetEndOfFile
lstrcpyA
FindFirstFileW
FindNextFileW
CreateEventA
CreateEventW
SetEvent
ResetEvent
CopyFileA
lstrcatA
CreateMutexA
ReleaseMutex
GetSystemTimeAsFileTime
GetWindowsDirectoryA
GetPrivateProfileStringA
CreateThread
GetCurrentThreadId
GetCurrentThread
ResumeThread
SetThreadPriority
ExitThread
TerminateProcess
QueryPerformanceCounter
GetThreadLocale
IsBadWritePtr
WideCharToMultiByte
OpenMutexA
MultiByteToWideChar
FileTimeToLocalFileTime
GetCurrentDirectoryA
LoadLibraryA
LoadLibraryW
LoadLibraryExA
LoadLibraryExW
GetProcAddress
GetOEMCP
GetExitCodeThread
RemoveDirectoryA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemDirectoryA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
MulDiv
SetFileTime
WriteConsoleA
GetCurrentProcess
GetUserDefaultLCID
GetModuleHandleW
lstrcmpiA
lstrcmpA
DeleteFileW
RaiseException
GetCPInfo
GetStartupInfoW
WaitForSingleObject
GetSystemInfo
GetEnvironmentStringsW
CompareStringW
MoveFileA
TerminateThread
FreeEnvironmentStringsA
FileTimeToDosDateTime
CompareFileTime
LocalFileTimeToFileTime
DisableThreadLibraryCalls
GetDateFormatA
GlobalReAlloc
VirtualAlloc
GlobalFree
GetLocaleInfoA
CreateDirectoryA
GetModuleFileNameA
SetEnvironmentVariableA
SetStdHandle
GetSystemTime
UnhandledExceptionFilter
FileTimeToSystemTime
ExpandEnvironmentStringsA
SetHandleCount
RtlUnwind
VirtualFree
GetCommandLineW
LocalAlloc
InterlockedIncrement
SystemTimeToFileTime
GetShortPathNameA
DeviceIoControl
LocalFree
GetExitCodeProcess
GetTempPathA
CreateFileMappingA
InterlockedExchange
GetFileType
SetFileAttributesA
CompareStringA
IsDebuggerPresent
VirtualProtect
FreeEnvironmentStringsW
GetVersionExW
lstrlenA
GetModuleHandleA
GetSystemDefaultLCID
GlobalHandle
GetFileTime
GetDriveTypeA
IsBadReadPtr
GetStringTypeA
GetStringTypeExA
GetDiskFreeSpaceA
SetFilePointer
GetConsoleMode
GlobalAlloc
GetTickCount
OpenProcess

msvcrt

realloc
__mb_cur_max
_snprintf
malloc
_errno
_ismbblead
__p__fmode
towlower
_fileno
_stat
strrchr
_itoa
memcmp
memchr
calloc
fputs
_getch
signal
sin
_ftol
isdigit
fprintf
cos
free
_purecall
_mkdir
exit
_iob
_stricmp
memcpy
printf
__p__commode
perror
_open_osfhandle
_setjmp
remove
_getcwd
__p__environ
_get_osfhandle
wcsrchr
fgetc
__dllonexit
_close
__p___initenv
_amsg_exit
__initenv
floor
sqrt
sprintf
_ultoa
__getmainargs
_flsbuf
iswspace
strerror
fgets
atof
strtok
qsort
_filbuf
__set_app_type
sscanf
rename
_unlock
__badioinfo
_read
memset
fputc
_cexit
strlen
wcsncpy
_strcmpi
_isctype
isspace
abort
_assert
log
_strnicmp
strncpy
tolower
fflush
_getpid
isleadbyte
_isatty
_fdopen
_lseek
_CIpow
longjmp
wctomb
fclose
rewind
_unlink
_mbsrchr
_strlwr
__lc_codepage
_XcptFilter
_osver
gmtime
fopen
_putenv
_chmod
time
wcscspn
_open
fwrite
strchr
strstr
wcscmp
_dup
_pipe
pow
_lseeki64
wcstol
localeconv
wcscat
_pctype
setlocale
_wcsicmp
wcsstr
iswdigit
srand
_CIsqrt
strcat
wcslen
_exit
_wcslwr
_snwprintf
ungetc
clearerr
_setmode
_onexit
_wcsupr
_kbhit
_itow
_filelengthi64
_vsnwprintf
memmove
_wcsnicmp
__pioinfo
strtol
strpbrk
_acmdln
fread
_adjust_fdiv
_wtoi
swscanf
ceil
_fullpath
_strdup
iswctype
_write
_mktemp
_beginthreadex
isxdigit
ctime
_c_exit
towupper
vsprintf
_lock
_fstat
strspn
_initterm
fseek
_wfopen
_wtol
wcsncmp
atexit
strcmp
fsetpos
bsearch
puts
strtoul
clock
wcstoul
_mbsicmp
putchar
swprintf
_setjmp3
__setusermatherr
getenv
rand
wcschr
_mbscmp
_dup2
_umask
_controlfp
strncat
atol
__CxxFrameHandler
strcspn
localtime
strcpy
toupper
wcstombs
_utime

user32

SetCursor
ScreenToClient
BeginPaint
IsWindowEnabled
SetWindowPos
LoadIconA
GetMessageA
SetMenu
CreatePopupMenu
GetIconInfo
ShowWindow
SetScrollRange
CreateMenu
GetParent
GetWindow
GetDC
UpdateWindow
WindowFromPoint
GetForegroundWindow
FillRect
GetClassInfoA
GetScrollPos
SetWindowsHookExA
SetCapture
IsWindowVisible
WinHelpA
ClientToScreen
GetPropA
DrawIcon
GetMenuItemID
WaitMessage
GetWindowPlacement
IntersectRect
DefWindowProcA
SetPropA
GetFocus
FrameRect
DrawEdge
GetMenuItemCount
CharLowerA
GetClassNameA
FindWindowA
IsChild
CallWindowProcA
GetSystemMetrics
SendDlgItemMessageA
GetMessagePos
DeleteMenu
EnableMenuItem
SetRect
CreateWindowExA
GetCursorPos
LoadBitmapA
RedrawWindow
InflateRect
IsRectEmpty
OemToCharA
PostQuitMessage
GetDlgItem
InsertMenuA
GetSysColor
GetClientRect
PtInRect
GetCapture
GetKeyboardType
EqualRect
GetWindowLongA
DispatchMessageA
SetFocus
SetWindowTextA
SendMessageA
PostMessageA
EmptyClipboard
InsertMenuItemA
GetActiveWindow
EndDialog
DestroyIcon
DrawMenuBar
GetLastActivePopup
CloseClipboard
SystemParametersInfoA
LoadCursorA
DrawIconEx
GetSubMenu
GetMenuStringA
SetScrollPos
AdjustWindowRectEx
SetClipboardData
SetWindowLongA
IsIconic
MessageBoxA
ShowCursor
RemoveMenu
wsprintfA
InvalidateRect
GetScrollRange
GetWindowDC
GetTopWindow
IsWindow
OpenClipboard
GetSystemMenu
GetMenuState
CharNextA
SetForegroundWindow
LoadStringA
TrackPopupMenu
SetScrollInfo
GetKeyState
DestroyWindow
ShowOwnedPopups
DialogBoxParamA
CheckMenuItem
EnumWindows
GetMenu
EnumThreadWindows
UnregisterClassA
MapWindowPoints
ReleaseCapture
EnableWindow
RegisterClassA
GetDCEx
MessageBeep
GetWindowRect
SetWindowPlacement
DestroyCursor
SetClassLongA
RemovePropA
GetScrollInfo
SetTimer
GetSysColorBrush
DrawFrameControl
ScrollWindow
TranslateMessage
DrawTextA
GetDesktopWindow
RegisterWindowMessageA
CallNextHookEx
PeekMessageA
SetActiveWindow
ReleaseDC

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

edceedcc8d951c3a674c7494973159c7

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 37KB - Virtual size: 36KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 48KB - Virtual size: 48KB

.rsrc Size: 2KB - Virtual size: 4KB

.text
Size: 37KB - Virtual size: 36KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 48KB - Virtual size: 48KB

.rsrc
Size: 2KB - Virtual size: 4KB